fix: use sudo rm -rf in post.js to handle root-owned files in /tmp/gh-aw

Copilot · pelikhan · web-flow · commit d92b01948d4e · 2026-03-25T21:37:06.000Z
Files written by Docker containers or privileged scripts during the job are owned by root, causing fs.rmSync to fail with EACCES. GitHub-hosted runners have passwordless sudo, so try `sudo rm -rf` first and fall back to fs.rmSync for self-hosted runners without sudo. Agent-Logs-Url: https://github.com/github/gh-aw/sessions/4905a7a0-58f6-4f2f-b856-8cae909dc609 Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
diff --git a/actions/setup/post.js b/actions/setup/post.js
@@ -2,16 +2,31 @@
 // Removes the /tmp/gh-aw/ directory created during the main action step.
 // Runs in the post-job phase so that temporary files are erased after the
 // workflow job completes, regardless of success or failure.
+//
+// Files inside /tmp/gh-aw/ may be owned by root (written by Docker containers
+// or privileged scripts), so we use `sudo rm -rf` &mdash; GitHub-hosted runners have
+// passwordless sudo.  We fall back to fs.rmSync for self-hosted runners that
+// don't have sudo but do have direct write access.
 
+const { spawnSync } = require("child_process");
 const fs = require("fs");
 
 const tmpDir = "/tmp/gh-aw";
 
-try {
-  console.log(`Cleaning up ${tmpDir}...`);
-  fs.rmSync(tmpDir, { recursive: true, force: true });
+console.log(`Cleaning up ${tmpDir}...`);
+
+// Try sudo rm -rf first (handles root-owned files on GitHub-hosted runners)
+const result = spawnSync("sudo", ["rm", "-rf", tmpDir], { stdio: "inherit" });
+
+if (result.status === 0) {
   console.log(`Cleaned up ${tmpDir}`);
-} catch (err) {
-  // Log but do not fail &mdash; cleanup is best-effort
-  console.error(`Warning: failed to clean up ${tmpDir}: ${err.message}`);
+} else {
+  // Fall back to fs.rmSync for environments without sudo
+  try {
+    fs.rmSync(tmpDir, { recursive: true, force: true });
+    console.log(`Cleaned up ${tmpDir}`);
+  } catch (err) {
+    // Log but do not fail &mdash; cleanup is best-effort
+    console.error(`Warning: failed to clean up ${tmpDir}: ${err.message}`);
+  }
 }
